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APPARATUS AND METHODS FOR ATTACKING A SCREENING 
ALGORITHM BASED ON PARTITIONING OF CONTENT 

Cross Reference to Related Application 

5 This application claims priority to the U.S. provisional 

patent application identified by Serial No. 60/283,323, filed on 
April 12, 2001, the disclosure of which is incorporated by 
reference herein. 

10 Field of the Invention 

The present invention relates generally to the field of secure 
Q communication, and more particularly to techniques for attacking a 
screening algorithm. 

]|8 Background of the Invention 

H! Security is an increasingly important concern in the delivery 

'j !f of music or other types of content over global communication 
M networks such as the Internet. More particularly, the successful 
iij implementation of such network-based content delivery systems 
2^ depends in large part on ensuring that content providers receive 
appropriate copyright royalties and that the delivered content 
cannot be pirated or otherwise subjected to unlawful exploitation. 

With regard to delivery of music content, a cooperative 
development effort known as Secure Digital Music Initiative (SDMI) 
25 has recently been formed by leading recording industry and 
technology companies. The goal of SDMI is the development of an 
open, interoperable architecture for digital music security. This 
will answer consumer demand for convenient accessibility to quality 
digital music, while also providing copyright protection so as to 
30 protect investment in content development and delivery. SDMI has 
produced a standard specification for portable music devices, the 
SDMI Portable Device Specification, Part 1, Version 1.0, 1999, and 



US010203 

an amendment thereto issued later that year, each of which are 
incorporated by reference. The longer-term effort of SDMI is an 
overall architecture for delivery of digital music in all forms. 

The illicit distribution of copyright material deprives the 
holder of the copyright legitimate royalties for this material, and 
could provide the supplier of this illicitly distributed material 
with gains that encourage continued illicit distributions. In light 
of the ease of information transfer provided by the Internet, 
content that is intended to be copy-protected, such as artistic 
renderings or other material having limited distribution rights, 
are susceptible to wide-scale illicit distribution. For example, 
the MP3 format for storing and transmitting compressed audio files 
has made the wide-scale distribution of audio recordings feasible, 
because a 30 or 40 megabyte digital audio recording of a song can 
be compressed into a 3 or 4 megabyte MP3 file. Using a typical 56 
kbps dial-up connection to the Internet, this MP3 file can be 
downloaded to a user's computer in a few minutes. Thus, a malicious 
party could read songs from an original and legitimate CD, encode 
the songs into MP3 format, and place the MP3 encoded song on the 
Internet for wide-scale illicit distribution. Alternatively, the 
malicious party could provide a direct dial-in service for 
downloading the MP3 encoded song. The illicit copy of the MP3 
encoded song can be subsequently rendered by software or hardware 
devices, or can be decompressed and stored onto a recordable CD for 
playback on a conventional CD player. 

- A number of schemes have been proposed for limiting the 
reproduction of copy-protected content. SDMI and others advocate 
the use of "digital watermarks" to identify authorized content. 
U.S. Patent No. 5,933,7 98, "Detecting a watermark embedded in an 
information system," issued 16 July 1997 to Johan P. Linnartz, 
discloses a technique for watermarking electronic content, and is 
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incorporated by reference herein. As in its paper watermark 
counterpart, a digital watermark is embedded in the content so as 
to be detectable, but unobtrusive. An audio playback of a digital 
music recording containing a watermark, for example, will be 

,5 substantially indistinguishable from a playback of the same 
recording without the watermark. A watermark detection device, 
however, is able to distinguish these two recordings based on the 
presence or absence of the watermark. Because some content may not 
be copy-protected and hence may not contain a watermark, the 

10 absence of a watermark cannot be used to distinguish legitimate 
from illegitimate material. 

Other copy protection schemes are also available. For example, 

%0 European Patent No. EP983687A2, "Copy Protection Schemes for Copy- 

||j protected Digital Material," issued 8 March 2000 to Johan P. 

lw Linnartz and Johan C. Talstra, presents a technique for the 
f I protection of copyright material via the use of a watermark 
"ticket" that controls the number of times the protected material 
may be rendered, and is incorporated by reference herein. 
^ An accurate reproduction of watermarked content will cause the 

2|| watermark to be reproduced in the copy of the watermarked content. 
An inaccurate, or lossy reproduction of watermarked content, 
however, may not provide a reproduction of the watermark in the 
copy of the content. A number of protection schemes, including 
those of the SDMI, have taken advantage of this characteristic of 

25 lossy reproduction to distinguish legitimate content from 
illegitimate content, based on the presence or absence of an 
appropriate watermark. In the SDMI scenario, two types of 
watermarks are defined: "robust" watermarks, and "fragile" 
watermarks. A robust watermark is one that is expected to survive a 

30 lossy reproduction that is designed to retain a substantial portion 
of the original content, such as an MP3 encoding of an audio 
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recording. That is, if the reproduction retains sufficient 
information to allow a reasonable rendering of the original 
recording, the robust watermark will also be retained. A fragile 
watermark, on the other hand, is one that is expected to be 
corrupted by a lossy reproduction or other illicit tampering. 

In the SDMI scheme, the presence of a robust watermark 
indicates that the content is copy-protected, and the absence or 
corruption of a corresponding fragile watermark when a robust 
watermark is present indicates that the copy-protected content has 
been tampered with in some manner. An SDMI compliant device is 
configured to refuse to render watermarked material with a 
corrupted watermark, or with a detected robust watermark but an 
absent fragile watermark, except if the corruption or absence of 
the watermark is justified by an "SDMI-certif ied" process, such as 
an SDMI compression of copy-protected content for use on a portable 
player. For ease of reference and understanding, the term "render" 
is used herein to include any processing or transferring of the 
content, such as playing, recording, converting, validating, 
storing, loading, and the like. This scheme serves to limit the 
distribution of content via MP3 or other compression techniques, 
but does not affect the distribution of counterfeit unaltered 
(uncompressed) reproductions of content material. This limited 
protection is deemed commercially viable, because the cost and 
inconvenience of downloading an extremely large file to obtain a 
song will tend to discourage the theft of uncompressed content. 

Despite SDMI and other ongoing efforts, existing techniques 
for secure distribution of music and other content suffer from a 
number of significant drawbacks. For example, SDMI has recently 
proposed the use of a new screening algorithm referred to as SDMI 
Lite. The SDMI Lite algorithm essentially screens a limited number 
of segments of the content which is being downloaded. Moreover, 
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the algorithm only screens segments having a predetermined duration 
of time. Prior to adopting this screening algorithm industry wide, 
apparatus and methods must be identified which would successfully 
circumvent proposed screening algorithms. 

»5 

Summary of the Invention 

The present invention provides apparatus and methods for 
attacking and circumventing a screening algorithm e.g., the above- 
noted SDMI Lite screening algorithm. The invention in an 
10 illustrative embodiment involves the partitioning of content to the 
^ point where the attacker's chance of successfully admitting the 
%p illicit content is greatly improved. 

An advantage of the present invention is that it identifies at 
03 least one fault in a security screening algorithm. It is only 
l|f| through the detection and identification of faults that the 
fij underlying screening algorithm can be improved to provide 
convenient, efficient and cost-effective protection for all content 
N ! providers. 

-m In accordance with one aspect of the invention, a method of 

2P attacking a screening algorithm includes the steps of identifying 
content to be admitted, partitioning the content into at least two 
sections wherein each of the at least two sections has a duration 
which is less than a duration of a threshold duration value 
assigned by the screening algorithm, and subjecting the content to 
25 the screening algorithm. Once the content has been successfully 
admitted, the integrity of the admitted content may be restored by 
reassembling the sections. 

These and other features and advantages of the present 
invention will become more apparent from the accompanying drawings 
30 and the following detailed description. 
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Brief Description of the Drawings 

FIG. 1 is a schematic diagram illustrating an illustrative 
embodiment of the present invention; 

FIG. 2 is a flow diagram illustrating the steps of a method of 
attack on a screening algorithm in accordance with an illustrative 
embodiment of the present invention; 

FIG. 3 is a diagram illustrating an example of the steps of a 
method of attack on a screening algorithm in accordance with the 
embodiment described with reference to FIG. 2; 

FIG. 4 is a flow diagram illustrating the steps of a method of 
attack on a screening algorithm in accordance with another 
illustrative embodiment of the present invention; 

FIG. 5 is a diagram illustrating an example of the steps of a 
method of attack on a screening algorithm in accordance with the 
embodiment described with reference to FIG. 4; and 

FIG. 6 is a flow diagram illustrating the steps of a method of 
attack on a screening algorithm in accordance with another 
illustrative embodiment of the present invention. 

Detailed Description of the Invention 

The present invention provides apparatus and methods which 
attack and circumvent screening algorithms that rely on a sampling 
of data, and, specifically, the proposed SDMI Lite and CDSafe 
screening algorithms. The CDSafe algorithm is described in pending 
U.S. Patent Application Serial No. 09/536,944, filed 03/28/00, in 
the name of inventors Toine Staring, Michael Epstein and Martin 
Rosner, entitled "Protecting Content from Illicit Reproduction by 
Proof of Existence of a Complete Data Set via Self-Referencing 
Sections," and is incorporated by reference herein. The methods 
are based on the concept of partitioning of content to the point 
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where the attacker's chances of successfully admitting the illicit 
content are greatly improved. 

Advantageously, the invention detects faults in the proposed 
security screening algorithms. It is only through the detection 

,5 and identification of faults that the underlying screening 
algorithm can be improved to provide convenient, efficient and 
cost-effective protection for all content providers. 

One goal of SDMI is to prevent the unlawful and illicit 
distribution of content on the Internet. In an attempt to 

10 accomplish this goal, SDMI has proposed methods of screening 
content that has been identified to be admitted. One such proposal 
is the previously-mentioned SDMI Lite screening algorithm. The new 
SDMI Lite screening algorithm was proposed in an attempt to 

|'l increase the performance of SDMI. The term "downloaded" as that 

l|| term is used herein is interchangeable with the term admitted. 
rt 1 Generally, the SDMI Lite screening algorithm randomly screens 

a predetermined number of sections of the marked content to 
?f; determine whether the content is legitimate. However, the proposed 
s?| SDMI Lite screening algorithm only checks sections having a 

20 predetermined duration of time. That is, the SDMI Lite screening 
algorithm will not screen sections of content that do not exceed a 
certain threshold value (such as, e.g., a section must be at least 
fifteen seconds long to meet the threshold value and therefore be 
subjected to the screening process) . Therefore, this and other 

25 similar screening algorithms are susceptible to an attack whereby 
content is partitioned into sections which are shorter in duration 
than the predetermined duration of time. 

Moreover, another threshold value which is relevant for 
consideration, in view of an attack on a screening algorithm, is 

30 the minimum amount of content material that is required to reliably 
detect a watermark. That is, SDMI may set a window of fifteen 
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seconds (as discussed above) to launch the screening algorithm. 
However, the watermark detector only needs approximately five (5) 
seconds out of the fifteen second window to detect a watermark. 
Therefore, screening algorithms are susceptible to an attack 
,5 whereby content is partitioned into sections which are shorter in 
duration than the duration of time which is required to detect a 
watermark. 

The present invention is achieved by initiating an attack on a 
screening algorithm by partitioning the content into small sections 
10 and passing these small sections through the screening algorithm. 

More specifically, with reference to FIG. 1, one method of 
ifj attacking the proposed SDMI Lite screening algorithm and the CDSafe 
algorithm is to partition content 12 that is identified and 
fff proposed to be downloaded from an external source such as, for 
]|j example, the Internet 10. As used herein, the term "partition" 
IIS refers to the act of separating content that the attacker knows to 
*\ be illegitimate into a number of sections 18, e.g., N sections as 
I?* shown, such that the illegitimate content 12 will pass the 
screening algorithm 14. That is, if the content 12 is partitioned 
2© into sections that are small enough to not be detected by the 
screening algorithm 14 (i.e., to not meet the time duration 
threshold value required by the algorithm) then such sections 18 
will be permitted to pass through the screen 14. Additionally, by 
partitioning content 12, the attacker is actually destroying a 
25 watermark embedded in content 12, thereby making the watermark 
undetectable to the screening algorithm. Moreover, even if a small 
section of the watermark is detected by the screening algorithm, 
the section of content may not be rejected since the 'identifying 
watermark has likely been altered beyond recognition, by the 
30 partitioning process. 
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To complete the attack, once all of the sections 18 have 
passed through the screening algorithm, the partitioned sections 
are reassembled within a personal computer 16, to restore the 
integrity of the illicit content. Personal computer 16 is an 
,5 illustrative example of a processing device that may be used to 
implement, e.g., a program for executing the method of attacking a 
screening algorithm described herein. The processing device may 
include a processor and a memory which communicate over at least a 
portion of a set of one or more system buses. 
10 Personal computer 16 may be representative of any type of 

g| processing device for use in implementing at least a portion of a 
^ method of attacking a screening algorithm in accordance with the 
ifl present invention. The elements of personal computer 16 may 
j/: correspond to conventional elements of such processing devices. 
!§§ For example, the personal computer may represent a 

microprocessor, central processing unit (CPU) , digital signal 
iU processor (DSP), or application-specific integrated circuit (ASIC), 
J'l as well as portions or combinations of these and other processing 
iff devices. The memory is typically an electronic memory, but may 
2fC| comprise or include other types of storage devices, such as disk- 
based optical or magnetic memory. 

The techniques described herein may be implemented in whole or 
in part using software stored and executed using the respective 
memory and processor elements of personal computer 16. It is noted 
25 that personal computer 16 may include other elements not shown, or 
other types and arrangements of elements capable of providing the 
attack functions described herein. 

Referring now to FIG. 2, a flow diagram is shown illustrating 
a method of attacking a screening algorithm in accordance with an 
30 embodiment of the present invention. 
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The first step 200 in an embodiment of the method of attacking 
a screening algorithm in accordance with the present invention is 
to partition the illicit content into N sections and create a table 
of contents relating to the N sections. The purpose of creating a 

,5 table of contents corresponding to the sections is to allow the 
attacker to be able to recreate the illicit content once it passes 
through the screening algorithm. The duration of each section is, 
in part r a function of the screening algorithm. That is, the 
duration of each section is preferably less than the duration of a 
10 section threshold duration value assigned by the screening 

^ algorithm. 

*|f Once the content is partitioned, the content is recorded in 

the SDMI domain in step 210. The SDMI domain represents an 
fj;| environment in which all SDMI rules and behaviors are obeyed. After 
lji recording the content in the SDMI domain, the content will be 
Hi subjected to an SDMI screening algorithm such as CDSafe or SDMI 
Lite. Although the content has been partitioned, depending on the 
constraints set in the screening algorithm, it is possible that not 
Jpi all of the sections will pass the screening algorithm on the first 
233 pass. Thus, it is expected that, in step 220, the screening 
algorithm will deny access to at least a portion of the content. 
However, it is also expected that at least one partitioned section 
of the content will be admitted past the screening algorithm (i.e., 
into the SDMI domain) . Some variants of the screening algorithm may 
25 allow detection of a single illicit section to cause the algorithm 
to deny access to the content. Therefore, at least two (2) or 
three (3) sections will likely be admitted by the screening 
algorithm with acceptable probability. 

In step 230, content is stepped to allow a new group of 
30 sections to be subjected to the screening algorithm. The term 
"stepping the content," as used herein, refers to the process of 
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storing the sections that were previously admitted and subjecting 
the remaining content to the screening algorithm. The section or 
sections of content that were permitted to pass the screening 
algorithm are stored in a memory device, such as a memory device 
associated with personal computer 16 in FIG. 1. 

After stepping the content, in step 240 the content is 
analyzed to determine whether all sections of the content have been 
admitted past the screening algorithm. If all sections of the 
content have not been admitted into the SDMI domain, the sections 
that have been admitted are at least temporarily stored within the 
SDMI domain and steps 210 through 240 are repeated with regard to 
those sections which were not admitted. This process continues 
until all sections of the content have been admitted into the SDMI 
domain . 

As indicated in step 250, when all sections of the content 
have passed the screening algorithm, the partitioned content is re- 
assembled into its initial configuration. At this point, the 
attacker has successfully downloaded illicit content, thereby 
circumventing the screening algorithm. 

Referring now to FIG. 3, a diagram illustrating an example of 
the steps of a method of attack on a screening algorithm in 
accordance with the embodiment described above with reference to 
FIG. 2 is shown. Initially, a block of content 300 is partitioned 
into a predetermined number of sections. In the illustrative 
embodiment illustrated in FIG. 3, content 300 is partitioned into 
twelve (12) sections. A table of contents (not shown) is created 
to identify the relative positions of the partitioned sections, 
such that the attacker will have the ability to re-assemble the 
content once it has been admitted into the SDMI domain. 

As indicated, the screening algorithm begins the screening 
process at the beginning of section one (1) . During the screening 



US010203 

process, sections 1, 2, and 3 were admitted into the SDMI domain 
(see reference number 302) before the screening algorithm detected 
illicit material and failed at section 4. 

Since all sections of the content have not yet passed into the 
SDMI domain, to facilitate the step of resubmitting the remaining 
block of content 306 to the screening algorithm, the three sections 
304 that were admitted are separated from content 300, and are 
stored in memory. The remaining content 30 6 is submitted to the 
screening algorithm beginning with section 4. This is referred to 
as stepping the content in FIG. 2. After proceeding with the 
process three times, nine (9) sections 308 of content 300 have been 
admitted into the SDMI domain and have been stored in memory apart 
from the remaining content. 

The example of FIG. 3 assumes that three (3) sections are 
admitted each time that the content is submitted to the screening 
algorithm. Thus, for content 300 which was partitioned into twelve 
sections, the procedure will need to be repeated four times for the 
entire content to be admitted into the SDMI domain where it can be 
re-assembled. The final step in the process is to re-assemble the 
content, as indicated by reference numeral 310. 

Referring now to FIG. 4, a flow diagram is shown illustrating 
the steps of the method of attack on a screening algorithm based on 
partitioning of the screened content in accordance with another 
illustrative embodiment of the present invention. 

The first step 400 in an embodiment of the method of attacking 
a screening algorithm in accordance with the present invention is 
to partition the illicit content into sections. The duration of 
each section is preferably less than the duration of a section 
threshold duration value assigned by the screening algorithm. Next, 
in step 410, a table of contents is created to identify the 
relative positions of the partitioned sections, such that the 

12 
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attacker will have the ability to re-assemble the content once it 
has been admitted into the SDMI domain. 

Once the content is partitioned, each section of the content 
is recorded in the SDMI domain in step 420. Upon recording each 
section of the content in the SDMI domain, the sections will be 
subjected to an SDMI screening algorithm such as CDSafe or SDMI 
Lite before it can be admitted into the domain. 

In the previous embodiment, the entire content was submitted 
to be recorded in the SDMI domain. In the current embodiment, the 
content is recorded in the SDMI domain one section at a time. 
Therefore, the method for attacking the screening algorithm will 
need to be repeated twelve times for content that has been 
partitioned into twelve sections, depending on the constraints set 
in the screening algorithm and the size of each section. However, 
due to the fact that the content is being recorded one section at a 
time, it is likely that each of the sections will pass the 
screening algorithm on the first pass. 

In step 430, a determination is made as to whether all 
sections of the content are in the SDMI domain. If all sections of 
the content are not within the SDMI domain, the user is instructed 
to record the next section. When all sections of the content have 
passed the screening algorithm, the partitioned content is re- 
assembled into its initial configuration in step 440. At this 
point, the attacker has successfully downloaded illicit content, 
thereby circumventing the screening algorithm. 

In an alternative to the embodiment described with reference 
to FIG. 4, the duration of each section which the content is 
divided into is made smaller than previously contemplated. More 
specifically, the duration of each section is preferably shorter 
than the feasible duration necessary to read a watermark. For 
example, the duration of each section may be in the range of about 

13 
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0.1 seconds to about 1.5 seconds. Therefore, the smaller sections 
will have a greater likelihood of passing through the screening 
algorithm. 

In the current embodiment, the content to be recorded in the 
SDMI domain has been partitioned into sections that are so short 
that it is likely that the screening algorithms will not be 
launched since the duration of each section will not meet the 
minimum threshold value of the screening algorithm. Moreover, even 
if the screening algorithm is launched, it is very likely that the 
sections will be admitted to the domain since the algorithms will 
not recognize a readable watermark. The method for attacking the 
screening algorithm will need to be repeated for each of the 
plurality of sections of content until each of the sections is in 
the SDMI domain. 

Referring now to FIG. 5, a diagram illustrating an example of 
the steps of a method of attack on a screening algorithm in 
accordance with the embodiment described with reference to FIG. 4 
is shown. Initially, a block of content is partitioned into a 
predetermined number of sections (not shown) . In the illustrative 
embodiment illustrated in FIG. 5, the content is partitioned into 
twelve (12) sections. As shown, only one section 500 is submitted 
to the screening algorithm at a time. Thus, for content that was 
partitioned into twelve sections, the procedure will need to be 
repeated twelve times for the entire content to be admitted into 
the SDMI domain. The final step in the process (after the entire 
content is in the SDMI domain) is to re-assemble the content, as 
indicated by reference numeral 510. 

Referring now to FIG. 6, a flow diagram is shown illustrating 
the steps of a method of attack on a SDMI screening algorithm based 
on partitioning of the screened content in accordance with yet 
another illustrative embodiment of the present invention. 



US010203 

The embodiment described with reference to FIG. 6 recognizes 
the fact that partitioning the content into a plurality of sections 
of shorter duration will cause the rate of transfer of data from 
the source to the SDMI domain to decrease. Therefore, to increase 
the rate of transfer, it is contemplated that the plurality of 
sections of content may be joined together in groups so that they 
are recorded in the SDMI domain in larger blocks. Preferably, the 
groups are formed randomly. Advantageously, by first partitioning 
the content into such small sections and then recombining the 
sections randomly, any watermarks that may have existed in the 
original content will not be legible in the randomly combined block 
and will therefore pass through the screening algorithm. 

Accordingly, the first step 600 in this embodiment of the 
present invention is to partition the illicit content into a 
plurality of sections. Next, in step 610, a table of contents 
relating to the original order of the sections is created. 
Although FIGs. 2, 4 and 6 illustrate the partitioning step taking 
place prior to creating the table of contents, it is to be 
appreciated that the table of contents may be created before the 
content is partitioned. 

In step 615, at least two of the sections are joined together. 
The sections to be joined are chosen randomly to further scramble 
any watermark that may exist in the sections. Once the content is 
accounted for in the table of contents, partitioned, and rejoined 
into larger sections, each joined section of the content is 
recorded in the SDMI domain in step 620. Upon recording each 
section of the content in the SDMI domain, the sections will be 
subjected to an SDMI screening algorithm such as SDMI Lite or 
CDSafe before they can be admitted in the domain. 

In step 630, a determination is made as to whether all 
sections of the content are in the SDMI domain. If all sections of 
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the content are not within the SDMI domain, the user is instructed 
to record the next section. When all sections of the content have 
passed the screening algorithm, the partitioned content is re- 
assembled into its initial configuration in step 64 0. At this 
.5 point, the attacker has successfully downloaded illicit content, 
thereby circumventing the screening algorithm. 

The above-described embodiments of the invention are intended 
to be illustrative only. For example, it is contemplated that the 
sections may be shuffled out of their original order, or otherwise 
10 mixed up to make it more difficult for the screening algorithm to 
^ detect illicit content. For example, where the content is a 
i|J digital content, the content may be partitioned into sections and 
the sections may be shuffled via a digital signal processor as is 
|y known to one having ordinary skill in the art. Under this 
l|| scenario, the establishment of an accurate and comprehensive table 
til of contents is important. Additionally, although the present 
invention is described with reference to the SDMI Lite and CDSafe 
H screening algorithms, the present invention may be applied to any 
J* screening algorithm. These and numerous other embodiments within 
2m the scope of the following claims will be apparent to those skilled 
in the art. 
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